Denial Of Service Commands - NETGEAR ProSafe GSM7228PS Cli Manual

7200 series managed switch cli refernce manual for software version 8.0.3
Hide thumbs Also See for ProSafe GSM7228PS:
Table of Contents

Advertisement

Software Rev: xxx xxx xxx
Serial Num: xxx xxx xxx
Mfg Name: xxx xxx xxx
Model Name: xxx xxx xxx
Asset ID: xxx xxx xxx
Location
Subtype: elin
Info: xxx xxx xxx
Extended POE
Device Type: pseDevice
Extended POE PSE
Available: 0.3 Watts
Source: primary
Priority: critical
Extended POE PD
Required: 0.2 Watts
Source: local
Priority: low

Denial of Service Commands

This section describes the commands you use to configure Denial of Service (DoS) Control. The
software provides support for classifying and blocking specific types of Denial of Service attacks.
You can configure your system to monitor and block these types of attacks:
SIP=DIP: Source IP address = Destination IP address.
First Fragment:TCP Header size smaller then configured value.
TCP Fragment: IP Fragment Offset = 1.
TCP Flag: TCP Flag SYN set and Source Port < 1024 or TCP Control Flags = 0 and TCP
Sequence Number = 0 or TCP Flags FIN, URG, and PSH set and TCP Sequence Number = 0
or TCP Flags SYN and FIN set.
L4 Port: Source TCP/UDP Port = Destination TCP/UDP Port.
ICMP: Limiting the size of ICMP Ping packets.
Switching Commands
ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
v1.0, May 2010
3-179

Advertisement

Table of Contents
loading

Table of Contents